affecting or changing the hosting application or the document server application. The 
external control object activates an intercept application which mimics the functions of the 
document server application and performs user actions on the digital data object as authorized 
by the external control object according to the control rights associated with the digital object. 
By intercepting and monitoring user actions on a digital data object, the invention can control 



access and use of the digital data object. 



IN THE SPECIFICATION 

In accordance with 37 CFR 1.121(b)(l)(iii), Attachment B contains marked up 
versions of the replacement paragraphs illustrating the newly introduced changes in the 
specification. 



Please insert the following paragraph on page 1, line 5. 



This applies tion is a continuation of U.S. Application No. 09/456,796, filed on 



December 8, 1999, 



which is incorporated by reference herein for all purposes. 



Please replace the paragraph on page 13, starting on line 2, with the following 
replacement paragraph. 
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This section describes the use of the DIT 350 (Figure 4) and DCL 400 (Figure 4) in 
connection with Microsoft's Active Document Specification. In this system, the DCL 400 
enforces security features relating to the usage of data objects of applications that are written 
using the Active Document Specification. The Active Document Specification is built upon 
the Microsoft Component Object Model (COM) architecture and is part of Microsoft's Object 
Linking and Embedding (OLE) family of technologies. The Active Document Specification 
is designed to allow a hosting application to embed documents from other applications in the 
hosting application. For example, Microsoft Word can host a Microsoft Excel spreadsheet 
that is within a Microsoft Word document. Under the Active Document Specification, a user 
can work on an embedded document, within the hosting application, without having to move 
to a separate application window. Additional information regarding the Active Document 
Specification can be found in the Active Documents Overview as presently located at 
http://msdn.microsoft.com/librarv/devprods/vs6/visualc/vccore/ core activex documents.htm 
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, "Understanding ActiveX and OLE" by David Chappell (Chapter 1 1), and "Inside OLE", 2nd 
edition, by Brockschmidt. 



Please replace the paragraph on pages 13-14, starting on line 30, with the following 
replacement paragraph. 
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In accordance with the Active Document Specification, an Active Document Server 
negotiates with its hosting Active Document Container for the use of some part of its window 
space. The Active Document Server also negotiates the incorporation of menu items into the 
Active Document Container's menus. As a result of these negotiations, the Active Document 
Server application appears to be part of the Active Document Container application. In 
reality, the container and server are distinct and individual component applications. The 
negotiations are made through a standard set of interfaces defined by the Active Document 
Specification. When a user of the Active Document Container accesses user interface 
features related to the hosted Active Document Server application, these interactions are 
passed on to the Active Document Server application, again through standard interfaces 
defined in the Active Document Specification. Additional interactions between the Active 
Document Container and Server are required for the following: notifications from the 
container to the server about when a user is in the window space of the server, when the 
server needs to refresh its area of the window, when and where the server should save its data, 
and when the server should shut down. It is noted that the Active Document Specification 
defines no inherent data security or access control features for its various defined component 
and application roles. These features are implemented after-the-fact through the described 
embodiment of the present invention. 



IN THE CLAIMS 

The following is a clean version of the entire set of pending claims. In accordance 
with 37 C.F.R. § 1.121(c)(2)(h), Attachment A provides marked-up versions of the claims 
containing newly introduced changes. 

Please amend Claim 1, 2, 21, and 22. 

Please cancel Claims 24-30. 
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